Symfony Profiler

[
  "entry" => App\Entity\Entry {#2419
    +user: Proxies\__CG__\App\Entity\User {#1970
      +avatar: null
      +cover: null
      +email: "robin@beehaw.org"
      +username: "@robin@beehaw.org"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1702223876 {#1536
        date: 2023-12-10 16:57:56.0 +01:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#1518 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#1520 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#1632 …}
      +entries: Doctrine\ORM\PersistentCollection {#1631 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#1704 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#1712 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#1468 …}
      +posts: Doctrine\ORM\PersistentCollection {#1659 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#1487 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1767 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1638 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1492 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1634 …}
      +follows: Doctrine\ORM\PersistentCollection {#1660 …}
      +followers: Doctrine\ORM\PersistentCollection {#1627 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1419 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1412 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1453 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1432 …}
      +reports: Doctrine\ORM\PersistentCollection {#1425 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1435 …}
      +violations: Doctrine\ORM\PersistentCollection {#1699 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1703 …}
      +awards: Doctrine\ORM\PersistentCollection {#1430 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1595 …}
      +categories: Doctrine\ORM\PersistentCollection {#1645 …}
      -id: 81695
      -password: "$2y$13$uv.H2o9.pNAWi2JY6kYXp.LtkmQOHvkqhJuq0rJqjWt471Wh3NNFC"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1678 …}
      +apId: "robin@beehaw.org"
      +apProfileId: "https://beehaw.org/u/robin"
      +apPublicUrl: "https://beehaw.org/u/robin"
      +apFollowersUrl: null
      +apInboxUrl: "https://beehaw.org/inbox"
      +apDomain: "beehaw.org"
      +apPreferredUsername: "robin"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1702223876 {#1515
        date: 2023-12-10 16:57:56.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1702223875 {#1516
        date: 2023-12-10 16:57:55.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Any-advice-on-running-a-pubnix-tilde"
    +title: "Any advice on running a pubnix/tilde?"
    +url: null
    +body: """
      I’m thinking about running my own pubnix/tilde. It would be invite-only and have a bunch of cool things:\n
      \n
      - git hosting with cgit or sourcehut\n
      - gemini hosting\n
      - web hosting\n
      - gopher hosting\n
      - FTP access\n
      - about 2GB of storage\n
      - matrix accounts + chat portal (Hydrogen seems cool)\n
      - internal message board/email?\n
      - maybe a CardDAV server?\n
      \n
      I think it would be a very cool opportunity to learn a bit about Linux and the internet. However, I literally have *no clue* how to set this up. I found this comment on Reddit:\n
      \n
      > It happens that you’re trying to build a tilde/pubnix? From my experience, tilde admins often give direct access to the system, but with proper permission elevation. Create a user group with limited permission (i.e. no sudo, disable specific software) and add their usernames to, give them a space in /home. Secondly, disable SSH passwords, ask them to send you their public keys, and only authenticate via public key. Finally, write a good/strict policy but also send a welcoming message. Also, you can look for further security practices, like changing default port, etc. but the key thing is proper user permission.\n
      \n
      That’s what I want. I was thinking about allowing password logins tho. I already have a VPS, which I want to reinstall to turn into this thing.\n
      \n
      I basically want to configure the services in a way, that they all depend on Unix accounts. That way I can create a Unix account with suitable permissions for every member, and stuff should Just Work™.\n
      \n
      So, I was thinking:\n
      \n
      - Exposing all git repos in `~/git/` at the URL `http(s)://git.example.com/~user/` (using cgit) and `gemini://git.example.com/~user/` (using git.gmi)\n
      - Exposing `~/pub/gem/` at `gemini://example.com/~user/`\n
      - Exposing `~/pub/web/` at `http(s)://example.com/~user/`\n
      - Exposing `~/pub/goph` at `gopher://example.com/~user/`\n
      - Creating `@user:example.com` matrix account with the same password as Unix. Changing the Unix password will also change the matrix password and changing the password from a matrix client should not be allowed.\n
      - Hosting Hydrogen (matrix client) at `https://chat.example.com`\n
      - Maybe host a CardDAV server with an account for every user, similar to what I want for matrix.\n
      \n
      Any pointers on how to set up something like this? How would I handle backups? (I know I can just backup all files in every member’s home directory, but how would I handle something more complicated, like the matrix accounts?). How would I make something like this secure?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 1
    +favouriteCount: 0
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1697723274 {#2414
      date: 2023-10-19 15:47:54.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: [
      "@user"
    ]
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 18324
    -titleTs: "'advic':2 'pubnix/tilde':6 'run':4"
    -bodyTs: "'/example.com/~user':289 '/git':263 '/git.example.com/~user':269 '/home':139 '/pub/gem':279 '/pub/goph':291 '/pub/web':285 '/~user/':275,283,295 '2gb':37 'access':35,107 'account':41,234,242,300,342,393 'add':130 'admin':103 'allow':199,328 'alreadi':204 'also':164,169,312 'ask':144 'authent':154 'backup':367,373 'basic':219 'bit':66 'board/email':49 'build':96 'bunch':18 'carddav':52,338 'cgit':25,271 'chang':178,307,313,318 'chat':42 'chat.example.com':334 'client':324,332 'clue':77 'comment':86 'complic':389 'configur':222 'cool':20,46,61 'creat':116,239,296 'default':179 'depend':231 'direct':106 'directori':381 'disabl':126,141 'elev':115 'etc':181 'everi':247,344,377 'example.com':282,294,298 'example.com/~user/':281,293 'experi':101 'expos':258,278,284,290 'file':375 'final':158 'found':84 'ftp':34 'gemini':28 'git':22,260 'git.example.com':274 'git.example.com/~user/':273 'git.gmi':277 'give':105,134 'good/strict':161 'gopher':32 'group':119 'handl':366,386 'happen':90 'home':380 'host':23,29,31,33,329,336 'howev':72 'http':267,287 'hydrogen':44,330 'i.e':123 'intern':47 'internet':71 'invit':13 'invite-on':12 'key':151,157,184 'know':369 'learn':64 'like':177,361,390,399 'limit':121 'linux':68 'liter':74 'login':201 'look':172 'm':2 'make':397 'matrix':40,299,315,323,331,352,392 'mayb':50,335 'member':248,378 'messag':48,168 'often':104 'opportun':62 'password':143,200,304,310,316,320 'permiss':114,122,189,245 'pointer':354 'polici':162 'port':180 'portal':43 'practic':176 'proper':113,187 'public':150,156 'pubnix/tilde':8 're':93 'reddit':88 'reinstal':212 'repo':261 'run':5 'second':140 'secur':175,401 'seem':45 'send':147,165 'server':53,339 'servic':224 'set':80,358 'similar':346 'softwar':128 'someth':360,387,398 'sourcehut':27 'space':137 'specif':127 'ssh':142 'storag':39 'stuff':250 'sudo':125 'suitabl':244 'system':110 'thing':21,185,217 'think':3,55,197,257 'tho':202 'tild':102 'tilde/pubnix':98 'tri':94 'turn':214 'unix':233,241,306,309 'url':266 'use':270,276 'user':118,188,297,345 'usernam':132 'via':155 'vps':207 'want':194,210,220,350 'way':227,236 'web':30 'welcom':167 'work':253 'would':10,57,364,384,395 'write':159"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1697628085
    +visibility: "visible             "
    +apId: "https://beehaw.org/post/8820647"
    +editedAt: null
    +createdAt: DateTimeImmutable @1697621585 {#1793
      date: 2023-10-18 11:33:05.0 +02:00
    }
  }
  "isSingle" => true
  "showShortSentence" => false
  "showBody" => true
]

[
  "class" => "entry--single section--top"
]

App\Twig\Components\EntryComponent {#2954
  -authorizationChecker: Symfony\Component\Security\Core\Authorization\AuthorizationChecker {#931 …}
  -newCommentMarkerCount: App\Kbin\NewCommentMarker\NewCommentMarkerCount {#2955 …}
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
  -twig: Twig\Environment {#1252 …}
  -requestStack: Symfony\Component\HttpFoundation\RequestStack {#1328 …}
  -security: Symfony\Bundle\SecurityBundle\Security {#1101 …}
  +entry: App\Entity\Entry {#2419
    +user: Proxies\__CG__\App\Entity\User {#1970
      +avatar: null
      +cover: null
      +email: "robin@beehaw.org"
      +username: "@robin@beehaw.org"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1702223876 {#1536
        date: 2023-12-10 16:57:56.0 +01:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#1518 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#1520 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#1632 …}
      +entries: Doctrine\ORM\PersistentCollection {#1631 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#1704 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#1712 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#1468 …}
      +posts: Doctrine\ORM\PersistentCollection {#1659 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#1487 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1767 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1638 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1492 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1634 …}
      +follows: Doctrine\ORM\PersistentCollection {#1660 …}
      +followers: Doctrine\ORM\PersistentCollection {#1627 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1419 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1412 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1453 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1432 …}
      +reports: Doctrine\ORM\PersistentCollection {#1425 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1435 …}
      +violations: Doctrine\ORM\PersistentCollection {#1699 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1703 …}
      +awards: Doctrine\ORM\PersistentCollection {#1430 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1595 …}
      +categories: Doctrine\ORM\PersistentCollection {#1645 …}
      -id: 81695
      -password: "$2y$13$uv.H2o9.pNAWi2JY6kYXp.LtkmQOHvkqhJuq0rJqjWt471Wh3NNFC"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1678 …}
      +apId: "robin@beehaw.org"
      +apProfileId: "https://beehaw.org/u/robin"
      +apPublicUrl: "https://beehaw.org/u/robin"
      +apFollowersUrl: null
      +apInboxUrl: "https://beehaw.org/inbox"
      +apDomain: "beehaw.org"
      +apPreferredUsername: "robin"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1702223876 {#1515
        date: 2023-12-10 16:57:56.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1702223875 {#1516
        date: 2023-12-10 16:57:55.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Any-advice-on-running-a-pubnix-tilde"
    +title: "Any advice on running a pubnix/tilde?"
    +url: null
    +body: """
      I’m thinking about running my own pubnix/tilde. It would be invite-only and have a bunch of cool things:\n
      \n
      - git hosting with cgit or sourcehut\n
      - gemini hosting\n
      - web hosting\n
      - gopher hosting\n
      - FTP access\n
      - about 2GB of storage\n
      - matrix accounts + chat portal (Hydrogen seems cool)\n
      - internal message board/email?\n
      - maybe a CardDAV server?\n
      \n
      I think it would be a very cool opportunity to learn a bit about Linux and the internet. However, I literally have *no clue* how to set this up. I found this comment on Reddit:\n
      \n
      > It happens that you’re trying to build a tilde/pubnix? From my experience, tilde admins often give direct access to the system, but with proper permission elevation. Create a user group with limited permission (i.e. no sudo, disable specific software) and add their usernames to, give them a space in /home. Secondly, disable SSH passwords, ask them to send you their public keys, and only authenticate via public key. Finally, write a good/strict policy but also send a welcoming message. Also, you can look for further security practices, like changing default port, etc. but the key thing is proper user permission.\n
      \n
      That’s what I want. I was thinking about allowing password logins tho. I already have a VPS, which I want to reinstall to turn into this thing.\n
      \n
      I basically want to configure the services in a way, that they all depend on Unix accounts. That way I can create a Unix account with suitable permissions for every member, and stuff should Just Work™.\n
      \n
      So, I was thinking:\n
      \n
      - Exposing all git repos in `~/git/` at the URL `http(s)://git.example.com/~user/` (using cgit) and `gemini://git.example.com/~user/` (using git.gmi)\n
      - Exposing `~/pub/gem/` at `gemini://example.com/~user/`\n
      - Exposing `~/pub/web/` at `http(s)://example.com/~user/`\n
      - Exposing `~/pub/goph` at `gopher://example.com/~user/`\n
      - Creating `@user:example.com` matrix account with the same password as Unix. Changing the Unix password will also change the matrix password and changing the password from a matrix client should not be allowed.\n
      - Hosting Hydrogen (matrix client) at `https://chat.example.com`\n
      - Maybe host a CardDAV server with an account for every user, similar to what I want for matrix.\n
      \n
      Any pointers on how to set up something like this? How would I handle backups? (I know I can just backup all files in every member’s home directory, but how would I handle something more complicated, like the matrix accounts?). How would I make something like this secure?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 1
    +favouriteCount: 0
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1697723274 {#2414
      date: 2023-10-19 15:47:54.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: [
      "@user"
    ]
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 18324
    -titleTs: "'advic':2 'pubnix/tilde':6 'run':4"
    -bodyTs: "'/example.com/~user':289 '/git':263 '/git.example.com/~user':269 '/home':139 '/pub/gem':279 '/pub/goph':291 '/pub/web':285 '/~user/':275,283,295 '2gb':37 'access':35,107 'account':41,234,242,300,342,393 'add':130 'admin':103 'allow':199,328 'alreadi':204 'also':164,169,312 'ask':144 'authent':154 'backup':367,373 'basic':219 'bit':66 'board/email':49 'build':96 'bunch':18 'carddav':52,338 'cgit':25,271 'chang':178,307,313,318 'chat':42 'chat.example.com':334 'client':324,332 'clue':77 'comment':86 'complic':389 'configur':222 'cool':20,46,61 'creat':116,239,296 'default':179 'depend':231 'direct':106 'directori':381 'disabl':126,141 'elev':115 'etc':181 'everi':247,344,377 'example.com':282,294,298 'example.com/~user/':281,293 'experi':101 'expos':258,278,284,290 'file':375 'final':158 'found':84 'ftp':34 'gemini':28 'git':22,260 'git.example.com':274 'git.example.com/~user/':273 'git.gmi':277 'give':105,134 'good/strict':161 'gopher':32 'group':119 'handl':366,386 'happen':90 'home':380 'host':23,29,31,33,329,336 'howev':72 'http':267,287 'hydrogen':44,330 'i.e':123 'intern':47 'internet':71 'invit':13 'invite-on':12 'key':151,157,184 'know':369 'learn':64 'like':177,361,390,399 'limit':121 'linux':68 'liter':74 'login':201 'look':172 'm':2 'make':397 'matrix':40,299,315,323,331,352,392 'mayb':50,335 'member':248,378 'messag':48,168 'often':104 'opportun':62 'password':143,200,304,310,316,320 'permiss':114,122,189,245 'pointer':354 'polici':162 'port':180 'portal':43 'practic':176 'proper':113,187 'public':150,156 'pubnix/tilde':8 're':93 'reddit':88 'reinstal':212 'repo':261 'run':5 'second':140 'secur':175,401 'seem':45 'send':147,165 'server':53,339 'servic':224 'set':80,358 'similar':346 'softwar':128 'someth':360,387,398 'sourcehut':27 'space':137 'specif':127 'ssh':142 'storag':39 'stuff':250 'sudo':125 'suitabl':244 'system':110 'thing':21,185,217 'think':3,55,197,257 'tho':202 'tild':102 'tilde/pubnix':98 'tri':94 'turn':214 'unix':233,241,306,309 'url':266 'use':270,276 'user':118,188,297,345 'usernam':132 'via':155 'vps':207 'want':194,210,220,350 'way':227,236 'web':30 'welcom':167 'work':253 'would':10,57,364,384,395 'write':159"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1697628085
    +visibility: "visible             "
    +apId: "https://beehaw.org/post/8820647"
    +editedAt: null
    +createdAt: DateTimeImmutable @1697621585 {#1793
      date: 2023-10-18 11:33:05.0 +02:00
    }
  }
  +isSingle: true
  +showShortSentence: false
  +showBody: true
  +showMagazineName: false
  +canSeeTrash: false
  +newComments: 0
}

[
  "user" => Proxies\__CG__\App\Entity\User {#1970
    +avatar: null
    +cover: null
    +email: "robin@beehaw.org"
    +username: "@robin@beehaw.org"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1702223876 {#1536
      date: 2023-12-10 16:57:56.0 +01:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#1518 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#1520 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#1632 …}
    +entries: Doctrine\ORM\PersistentCollection {#1631 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#1704 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#1712 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#1468 …}
    +posts: Doctrine\ORM\PersistentCollection {#1659 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#1487 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1767 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1638 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1492 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1634 …}
    +follows: Doctrine\ORM\PersistentCollection {#1660 …}
    +followers: Doctrine\ORM\PersistentCollection {#1627 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1419 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1412 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1453 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1432 …}
    +reports: Doctrine\ORM\PersistentCollection {#1425 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1435 …}
    +violations: Doctrine\ORM\PersistentCollection {#1699 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1703 …}
    +awards: Doctrine\ORM\PersistentCollection {#1430 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1595 …}
    +categories: Doctrine\ORM\PersistentCollection {#1645 …}
    -id: 81695
    -password: "$2y$13$uv.H2o9.pNAWi2JY6kYXp.LtkmQOHvkqhJuq0rJqjWt471Wh3NNFC"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1678 …}
    +apId: "robin@beehaw.org"
    +apProfileId: "https://beehaw.org/u/robin"
    +apPublicUrl: "https://beehaw.org/u/robin"
    +apFollowersUrl: null
    +apInboxUrl: "https://beehaw.org/inbox"
    +apDomain: "beehaw.org"
    +apPreferredUsername: "robin"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1702223876 {#1515
      date: 2023-12-10 16:57:56.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1702223875 {#1516
      date: 2023-12-10 16:57:55.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  "showAvatar" => false
]

App\Twig\Components\UserInlineComponent {#3291
  +user: Proxies\__CG__\App\Entity\User {#1970
    +avatar: null
    +cover: null
    +email: "robin@beehaw.org"
    +username: "@robin@beehaw.org"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1702223876 {#1536
      date: 2023-12-10 16:57:56.0 +01:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#1518 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#1520 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#1632 …}
    +entries: Doctrine\ORM\PersistentCollection {#1631 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#1704 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#1712 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#1468 …}
    +posts: Doctrine\ORM\PersistentCollection {#1659 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#1487 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1767 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1638 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1492 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1634 …}
    +follows: Doctrine\ORM\PersistentCollection {#1660 …}
    +followers: Doctrine\ORM\PersistentCollection {#1627 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1419 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1412 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1453 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1432 …}
    +reports: Doctrine\ORM\PersistentCollection {#1425 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1435 …}
    +violations: Doctrine\ORM\PersistentCollection {#1699 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1703 …}
    +awards: Doctrine\ORM\PersistentCollection {#1430 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1595 …}
    +categories: Doctrine\ORM\PersistentCollection {#1645 …}
    -id: 81695
    -password: "$2y$13$uv.H2o9.pNAWi2JY6kYXp.LtkmQOHvkqhJuq0rJqjWt471Wh3NNFC"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1678 …}
    +apId: "robin@beehaw.org"
    +apProfileId: "https://beehaw.org/u/robin"
    +apPublicUrl: "https://beehaw.org/u/robin"
    +apFollowersUrl: null
    +apInboxUrl: "https://beehaw.org/inbox"
    +apDomain: "beehaw.org"
    +apPreferredUsername: "robin"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1702223876 {#1515
      date: 2023-12-10 16:57:56.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1702223875 {#1516
      date: 2023-12-10 16:57:55.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +showAvatar: false
}

[
  "date" => DateTimeImmutable @1697621585 {#1793
    date: 2023-10-18 11:33:05.0 +02:00
  }
]

App\Twig\Components\DateComponent {#3361
  +date: DateTimeImmutable @1697621585 {#1793
    date: 2023-10-18 11:33:05.0 +02:00
  }
}

[
  "createdAt" => DateTimeImmutable @1697621585 {#1793
    date: 2023-10-18 11:33:05.0 +02:00
  }
  "editedAt" => null
]

App\Twig\Components\DateEditedComponent {#3425
  +createdAt: DateTimeImmutable @1697621585 {#1793
    date: 2023-10-18 11:33:05.0 +02:00
  }
  +editedAt: null
}

[
  "subject" => App\Entity\Entry {#2419
    +user: Proxies\__CG__\App\Entity\User {#1970
      +avatar: null
      +cover: null
      +email: "robin@beehaw.org"
      +username: "@robin@beehaw.org"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1702223876 {#1536
        date: 2023-12-10 16:57:56.0 +01:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#1518 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#1520 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#1632 …}
      +entries: Doctrine\ORM\PersistentCollection {#1631 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#1704 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#1712 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#1468 …}
      +posts: Doctrine\ORM\PersistentCollection {#1659 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#1487 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1767 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1638 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1492 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1634 …}
      +follows: Doctrine\ORM\PersistentCollection {#1660 …}
      +followers: Doctrine\ORM\PersistentCollection {#1627 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1419 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1412 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1453 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1432 …}
      +reports: Doctrine\ORM\PersistentCollection {#1425 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1435 …}
      +violations: Doctrine\ORM\PersistentCollection {#1699 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1703 …}
      +awards: Doctrine\ORM\PersistentCollection {#1430 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1595 …}
      +categories: Doctrine\ORM\PersistentCollection {#1645 …}
      -id: 81695
      -password: "$2y$13$uv.H2o9.pNAWi2JY6kYXp.LtkmQOHvkqhJuq0rJqjWt471Wh3NNFC"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1678 …}
      +apId: "robin@beehaw.org"
      +apProfileId: "https://beehaw.org/u/robin"
      +apPublicUrl: "https://beehaw.org/u/robin"
      +apFollowersUrl: null
      +apInboxUrl: "https://beehaw.org/inbox"
      +apDomain: "beehaw.org"
      +apPreferredUsername: "robin"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1702223876 {#1515
        date: 2023-12-10 16:57:56.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1702223875 {#1516
        date: 2023-12-10 16:57:55.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Any-advice-on-running-a-pubnix-tilde"
    +title: "Any advice on running a pubnix/tilde?"
    +url: null
    +body: """
      I’m thinking about running my own pubnix/tilde. It would be invite-only and have a bunch of cool things:\n
      \n
      - git hosting with cgit or sourcehut\n
      - gemini hosting\n
      - web hosting\n
      - gopher hosting\n
      - FTP access\n
      - about 2GB of storage\n
      - matrix accounts + chat portal (Hydrogen seems cool)\n
      - internal message board/email?\n
      - maybe a CardDAV server?\n
      \n
      I think it would be a very cool opportunity to learn a bit about Linux and the internet. However, I literally have *no clue* how to set this up. I found this comment on Reddit:\n
      \n
      > It happens that you’re trying to build a tilde/pubnix? From my experience, tilde admins often give direct access to the system, but with proper permission elevation. Create a user group with limited permission (i.e. no sudo, disable specific software) and add their usernames to, give them a space in /home. Secondly, disable SSH passwords, ask them to send you their public keys, and only authenticate via public key. Finally, write a good/strict policy but also send a welcoming message. Also, you can look for further security practices, like changing default port, etc. but the key thing is proper user permission.\n
      \n
      That’s what I want. I was thinking about allowing password logins tho. I already have a VPS, which I want to reinstall to turn into this thing.\n
      \n
      I basically want to configure the services in a way, that they all depend on Unix accounts. That way I can create a Unix account with suitable permissions for every member, and stuff should Just Work™.\n
      \n
      So, I was thinking:\n
      \n
      - Exposing all git repos in `~/git/` at the URL `http(s)://git.example.com/~user/` (using cgit) and `gemini://git.example.com/~user/` (using git.gmi)\n
      - Exposing `~/pub/gem/` at `gemini://example.com/~user/`\n
      - Exposing `~/pub/web/` at `http(s)://example.com/~user/`\n
      - Exposing `~/pub/goph` at `gopher://example.com/~user/`\n
      - Creating `@user:example.com` matrix account with the same password as Unix. Changing the Unix password will also change the matrix password and changing the password from a matrix client should not be allowed.\n
      - Hosting Hydrogen (matrix client) at `https://chat.example.com`\n
      - Maybe host a CardDAV server with an account for every user, similar to what I want for matrix.\n
      \n
      Any pointers on how to set up something like this? How would I handle backups? (I know I can just backup all files in every member’s home directory, but how would I handle something more complicated, like the matrix accounts?). How would I make something like this secure?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 1
    +favouriteCount: 0
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1697723274 {#2414
      date: 2023-10-19 15:47:54.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: [
      "@user"
    ]
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 18324
    -titleTs: "'advic':2 'pubnix/tilde':6 'run':4"
    -bodyTs: "'/example.com/~user':289 '/git':263 '/git.example.com/~user':269 '/home':139 '/pub/gem':279 '/pub/goph':291 '/pub/web':285 '/~user/':275,283,295 '2gb':37 'access':35,107 'account':41,234,242,300,342,393 'add':130 'admin':103 'allow':199,328 'alreadi':204 'also':164,169,312 'ask':144 'authent':154 'backup':367,373 'basic':219 'bit':66 'board/email':49 'build':96 'bunch':18 'carddav':52,338 'cgit':25,271 'chang':178,307,313,318 'chat':42 'chat.example.com':334 'client':324,332 'clue':77 'comment':86 'complic':389 'configur':222 'cool':20,46,61 'creat':116,239,296 'default':179 'depend':231 'direct':106 'directori':381 'disabl':126,141 'elev':115 'etc':181 'everi':247,344,377 'example.com':282,294,298 'example.com/~user/':281,293 'experi':101 'expos':258,278,284,290 'file':375 'final':158 'found':84 'ftp':34 'gemini':28 'git':22,260 'git.example.com':274 'git.example.com/~user/':273 'git.gmi':277 'give':105,134 'good/strict':161 'gopher':32 'group':119 'handl':366,386 'happen':90 'home':380 'host':23,29,31,33,329,336 'howev':72 'http':267,287 'hydrogen':44,330 'i.e':123 'intern':47 'internet':71 'invit':13 'invite-on':12 'key':151,157,184 'know':369 'learn':64 'like':177,361,390,399 'limit':121 'linux':68 'liter':74 'login':201 'look':172 'm':2 'make':397 'matrix':40,299,315,323,331,352,392 'mayb':50,335 'member':248,378 'messag':48,168 'often':104 'opportun':62 'password':143,200,304,310,316,320 'permiss':114,122,189,245 'pointer':354 'polici':162 'port':180 'portal':43 'practic':176 'proper':113,187 'public':150,156 'pubnix/tilde':8 're':93 'reddit':88 'reinstal':212 'repo':261 'run':5 'second':140 'secur':175,401 'seem':45 'send':147,165 'server':53,339 'servic':224 'set':80,358 'similar':346 'softwar':128 'someth':360,387,398 'sourcehut':27 'space':137 'specif':127 'ssh':142 'storag':39 'stuff':250 'sudo':125 'suitabl':244 'system':110 'thing':21,185,217 'think':3,55,197,257 'tho':202 'tild':102 'tilde/pubnix':98 'tri':94 'turn':214 'unix':233,241,306,309 'url':266 'use':270,276 'user':118,188,297,345 'usernam':132 'via':155 'vps':207 'want':194,210,220,350 'way':227,236 'web':30 'welcom':167 'work':253 'would':10,57,364,384,395 'write':159"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1697628085
    +visibility: "visible             "
    +apId: "https://beehaw.org/post/8820647"
    +editedAt: null
    +createdAt: DateTimeImmutable @1697621585 {#1793
      date: 2023-10-18 11:33:05.0 +02:00
    }
  }
]

App\Twig\Components\VoteComponent {#3490
  +subject: App\Entity\Entry {#2419
    +user: Proxies\__CG__\App\Entity\User {#1970
      +avatar: null
      +cover: null
      +email: "robin@beehaw.org"
      +username: "@robin@beehaw.org"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1702223876 {#1536
        date: 2023-12-10 16:57:56.0 +01:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#1518 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#1520 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#1632 …}
      +entries: Doctrine\ORM\PersistentCollection {#1631 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#1704 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#1712 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#1468 …}
      +posts: Doctrine\ORM\PersistentCollection {#1659 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#1487 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1767 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1638 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1492 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1634 …}
      +follows: Doctrine\ORM\PersistentCollection {#1660 …}
      +followers: Doctrine\ORM\PersistentCollection {#1627 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1419 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1412 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1453 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1432 …}
      +reports: Doctrine\ORM\PersistentCollection {#1425 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1435 …}
      +violations: Doctrine\ORM\PersistentCollection {#1699 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1703 …}
      +awards: Doctrine\ORM\PersistentCollection {#1430 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1595 …}
      +categories: Doctrine\ORM\PersistentCollection {#1645 …}
      -id: 81695
      -password: "$2y$13$uv.H2o9.pNAWi2JY6kYXp.LtkmQOHvkqhJuq0rJqjWt471Wh3NNFC"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1678 …}
      +apId: "robin@beehaw.org"
      +apProfileId: "https://beehaw.org/u/robin"
      +apPublicUrl: "https://beehaw.org/u/robin"
      +apFollowersUrl: null
      +apInboxUrl: "https://beehaw.org/inbox"
      +apDomain: "beehaw.org"
      +apPreferredUsername: "robin"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1702223876 {#1515
        date: 2023-12-10 16:57:56.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1702223875 {#1516
        date: 2023-12-10 16:57:55.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Any-advice-on-running-a-pubnix-tilde"
    +title: "Any advice on running a pubnix/tilde?"
    +url: null
    +body: """
      I’m thinking about running my own pubnix/tilde. It would be invite-only and have a bunch of cool things:\n
      \n
      - git hosting with cgit or sourcehut\n
      - gemini hosting\n
      - web hosting\n
      - gopher hosting\n
      - FTP access\n
      - about 2GB of storage\n
      - matrix accounts + chat portal (Hydrogen seems cool)\n
      - internal message board/email?\n
      - maybe a CardDAV server?\n
      \n
      I think it would be a very cool opportunity to learn a bit about Linux and the internet. However, I literally have *no clue* how to set this up. I found this comment on Reddit:\n
      \n
      > It happens that you’re trying to build a tilde/pubnix? From my experience, tilde admins often give direct access to the system, but with proper permission elevation. Create a user group with limited permission (i.e. no sudo, disable specific software) and add their usernames to, give them a space in /home. Secondly, disable SSH passwords, ask them to send you their public keys, and only authenticate via public key. Finally, write a good/strict policy but also send a welcoming message. Also, you can look for further security practices, like changing default port, etc. but the key thing is proper user permission.\n
      \n
      That’s what I want. I was thinking about allowing password logins tho. I already have a VPS, which I want to reinstall to turn into this thing.\n
      \n
      I basically want to configure the services in a way, that they all depend on Unix accounts. That way I can create a Unix account with suitable permissions for every member, and stuff should Just Work™.\n
      \n
      So, I was thinking:\n
      \n
      - Exposing all git repos in `~/git/` at the URL `http(s)://git.example.com/~user/` (using cgit) and `gemini://git.example.com/~user/` (using git.gmi)\n
      - Exposing `~/pub/gem/` at `gemini://example.com/~user/`\n
      - Exposing `~/pub/web/` at `http(s)://example.com/~user/`\n
      - Exposing `~/pub/goph` at `gopher://example.com/~user/`\n
      - Creating `@user:example.com` matrix account with the same password as Unix. Changing the Unix password will also change the matrix password and changing the password from a matrix client should not be allowed.\n
      - Hosting Hydrogen (matrix client) at `https://chat.example.com`\n
      - Maybe host a CardDAV server with an account for every user, similar to what I want for matrix.\n
      \n
      Any pointers on how to set up something like this? How would I handle backups? (I know I can just backup all files in every member’s home directory, but how would I handle something more complicated, like the matrix accounts?). How would I make something like this secure?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 1
    +favouriteCount: 0
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1697723274 {#2414
      date: 2023-10-19 15:47:54.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: [
      "@user"
    ]
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 18324
    -titleTs: "'advic':2 'pubnix/tilde':6 'run':4"
    -bodyTs: "'/example.com/~user':289 '/git':263 '/git.example.com/~user':269 '/home':139 '/pub/gem':279 '/pub/goph':291 '/pub/web':285 '/~user/':275,283,295 '2gb':37 'access':35,107 'account':41,234,242,300,342,393 'add':130 'admin':103 'allow':199,328 'alreadi':204 'also':164,169,312 'ask':144 'authent':154 'backup':367,373 'basic':219 'bit':66 'board/email':49 'build':96 'bunch':18 'carddav':52,338 'cgit':25,271 'chang':178,307,313,318 'chat':42 'chat.example.com':334 'client':324,332 'clue':77 'comment':86 'complic':389 'configur':222 'cool':20,46,61 'creat':116,239,296 'default':179 'depend':231 'direct':106 'directori':381 'disabl':126,141 'elev':115 'etc':181 'everi':247,344,377 'example.com':282,294,298 'example.com/~user/':281,293 'experi':101 'expos':258,278,284,290 'file':375 'final':158 'found':84 'ftp':34 'gemini':28 'git':22,260 'git.example.com':274 'git.example.com/~user/':273 'git.gmi':277 'give':105,134 'good/strict':161 'gopher':32 'group':119 'handl':366,386 'happen':90 'home':380 'host':23,29,31,33,329,336 'howev':72 'http':267,287 'hydrogen':44,330 'i.e':123 'intern':47 'internet':71 'invit':13 'invite-on':12 'key':151,157,184 'know':369 'learn':64 'like':177,361,390,399 'limit':121 'linux':68 'liter':74 'login':201 'look':172 'm':2 'make':397 'matrix':40,299,315,323,331,352,392 'mayb':50,335 'member':248,378 'messag':48,168 'often':104 'opportun':62 'password':143,200,304,310,316,320 'permiss':114,122,189,245 'pointer':354 'polici':162 'port':180 'portal':43 'practic':176 'proper':113,187 'public':150,156 'pubnix/tilde':8 're':93 'reddit':88 'reinstal':212 'repo':261 'run':5 'second':140 'secur':175,401 'seem':45 'send':147,165 'server':53,339 'servic':224 'set':80,358 'similar':346 'softwar':128 'someth':360,387,398 'sourcehut':27 'space':137 'specif':127 'ssh':142 'storag':39 'stuff':250 'sudo':125 'suitabl':244 'system':110 'thing':21,185,217 'think':3,55,197,257 'tho':202 'tild':102 'tilde/pubnix':98 'tri':94 'turn':214 'unix':233,241,306,309 'url':266 'use':270,276 'user':118,188,297,345 'usernam':132 'via':155 'vps':207 'want':194,210,220,350 'way':227,236 'web':30 'welcom':167 'work':253 'would':10,57,364,384,395 'write':159"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1697628085
    +visibility: "visible             "
    +apId: "https://beehaw.org/post/8820647"
    +editedAt: null
    +createdAt: DateTimeImmutable @1697621585 {#1793
      date: 2023-10-18 11:33:05.0 +02:00
    }
  }
  +formDest: "entry"
  +showDownvote: true
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
}

[
  "subject" => App\Entity\Entry {#2419
    +user: Proxies\__CG__\App\Entity\User {#1970
      +avatar: null
      +cover: null
      +email: "robin@beehaw.org"
      +username: "@robin@beehaw.org"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1702223876 {#1536
        date: 2023-12-10 16:57:56.0 +01:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#1518 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#1520 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#1632 …}
      +entries: Doctrine\ORM\PersistentCollection {#1631 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#1704 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#1712 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#1468 …}
      +posts: Doctrine\ORM\PersistentCollection {#1659 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#1487 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1767 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1638 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1492 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1634 …}
      +follows: Doctrine\ORM\PersistentCollection {#1660 …}
      +followers: Doctrine\ORM\PersistentCollection {#1627 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1419 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1412 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1453 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1432 …}
      +reports: Doctrine\ORM\PersistentCollection {#1425 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1435 …}
      +violations: Doctrine\ORM\PersistentCollection {#1699 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1703 …}
      +awards: Doctrine\ORM\PersistentCollection {#1430 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1595 …}
      +categories: Doctrine\ORM\PersistentCollection {#1645 …}
      -id: 81695
      -password: "$2y$13$uv.H2o9.pNAWi2JY6kYXp.LtkmQOHvkqhJuq0rJqjWt471Wh3NNFC"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1678 …}
      +apId: "robin@beehaw.org"
      +apProfileId: "https://beehaw.org/u/robin"
      +apPublicUrl: "https://beehaw.org/u/robin"
      +apFollowersUrl: null
      +apInboxUrl: "https://beehaw.org/inbox"
      +apDomain: "beehaw.org"
      +apPreferredUsername: "robin"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1702223876 {#1515
        date: 2023-12-10 16:57:56.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1702223875 {#1516
        date: 2023-12-10 16:57:55.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Any-advice-on-running-a-pubnix-tilde"
    +title: "Any advice on running a pubnix/tilde?"
    +url: null
    +body: """
      I’m thinking about running my own pubnix/tilde. It would be invite-only and have a bunch of cool things:\n
      \n
      - git hosting with cgit or sourcehut\n
      - gemini hosting\n
      - web hosting\n
      - gopher hosting\n
      - FTP access\n
      - about 2GB of storage\n
      - matrix accounts + chat portal (Hydrogen seems cool)\n
      - internal message board/email?\n
      - maybe a CardDAV server?\n
      \n
      I think it would be a very cool opportunity to learn a bit about Linux and the internet. However, I literally have *no clue* how to set this up. I found this comment on Reddit:\n
      \n
      > It happens that you’re trying to build a tilde/pubnix? From my experience, tilde admins often give direct access to the system, but with proper permission elevation. Create a user group with limited permission (i.e. no sudo, disable specific software) and add their usernames to, give them a space in /home. Secondly, disable SSH passwords, ask them to send you their public keys, and only authenticate via public key. Finally, write a good/strict policy but also send a welcoming message. Also, you can look for further security practices, like changing default port, etc. but the key thing is proper user permission.\n
      \n
      That’s what I want. I was thinking about allowing password logins tho. I already have a VPS, which I want to reinstall to turn into this thing.\n
      \n
      I basically want to configure the services in a way, that they all depend on Unix accounts. That way I can create a Unix account with suitable permissions for every member, and stuff should Just Work™.\n
      \n
      So, I was thinking:\n
      \n
      - Exposing all git repos in `~/git/` at the URL `http(s)://git.example.com/~user/` (using cgit) and `gemini://git.example.com/~user/` (using git.gmi)\n
      - Exposing `~/pub/gem/` at `gemini://example.com/~user/`\n
      - Exposing `~/pub/web/` at `http(s)://example.com/~user/`\n
      - Exposing `~/pub/goph` at `gopher://example.com/~user/`\n
      - Creating `@user:example.com` matrix account with the same password as Unix. Changing the Unix password will also change the matrix password and changing the password from a matrix client should not be allowed.\n
      - Hosting Hydrogen (matrix client) at `https://chat.example.com`\n
      - Maybe host a CardDAV server with an account for every user, similar to what I want for matrix.\n
      \n
      Any pointers on how to set up something like this? How would I handle backups? (I know I can just backup all files in every member’s home directory, but how would I handle something more complicated, like the matrix accounts?). How would I make something like this secure?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 1
    +favouriteCount: 0
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1697723274 {#2414
      date: 2023-10-19 15:47:54.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: [
      "@user"
    ]
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 18324
    -titleTs: "'advic':2 'pubnix/tilde':6 'run':4"
    -bodyTs: "'/example.com/~user':289 '/git':263 '/git.example.com/~user':269 '/home':139 '/pub/gem':279 '/pub/goph':291 '/pub/web':285 '/~user/':275,283,295 '2gb':37 'access':35,107 'account':41,234,242,300,342,393 'add':130 'admin':103 'allow':199,328 'alreadi':204 'also':164,169,312 'ask':144 'authent':154 'backup':367,373 'basic':219 'bit':66 'board/email':49 'build':96 'bunch':18 'carddav':52,338 'cgit':25,271 'chang':178,307,313,318 'chat':42 'chat.example.com':334 'client':324,332 'clue':77 'comment':86 'complic':389 'configur':222 'cool':20,46,61 'creat':116,239,296 'default':179 'depend':231 'direct':106 'directori':381 'disabl':126,141 'elev':115 'etc':181 'everi':247,344,377 'example.com':282,294,298 'example.com/~user/':281,293 'experi':101 'expos':258,278,284,290 'file':375 'final':158 'found':84 'ftp':34 'gemini':28 'git':22,260 'git.example.com':274 'git.example.com/~user/':273 'git.gmi':277 'give':105,134 'good/strict':161 'gopher':32 'group':119 'handl':366,386 'happen':90 'home':380 'host':23,29,31,33,329,336 'howev':72 'http':267,287 'hydrogen':44,330 'i.e':123 'intern':47 'internet':71 'invit':13 'invite-on':12 'key':151,157,184 'know':369 'learn':64 'like':177,361,390,399 'limit':121 'linux':68 'liter':74 'login':201 'look':172 'm':2 'make':397 'matrix':40,299,315,323,331,352,392 'mayb':50,335 'member':248,378 'messag':48,168 'often':104 'opportun':62 'password':143,200,304,310,316,320 'permiss':114,122,189,245 'pointer':354 'polici':162 'port':180 'portal':43 'practic':176 'proper':113,187 'public':150,156 'pubnix/tilde':8 're':93 'reddit':88 'reinstal':212 'repo':261 'run':5 'second':140 'secur':175,401 'seem':45 'send':147,165 'server':53,339 'servic':224 'set':80,358 'similar':346 'softwar':128 'someth':360,387,398 'sourcehut':27 'space':137 'specif':127 'ssh':142 'storag':39 'stuff':250 'sudo':125 'suitabl':244 'system':110 'thing':21,185,217 'think':3,55,197,257 'tho':202 'tild':102 'tilde/pubnix':98 'tri':94 'turn':214 'unix':233,241,306,309 'url':266 'use':270,276 'user':118,188,297,345 'usernam':132 'via':155 'vps':207 'want':194,210,220,350 'way':227,236 'web':30 'welcom':167 'work':253 'would':10,57,364,384,395 'write':159"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1697628085
    +visibility: "visible             "
    +apId: "https://beehaw.org/post/8820647"
    +editedAt: null
    +createdAt: DateTimeImmutable @1697621585 {#1793
      date: 2023-10-18 11:33:05.0 +02:00
    }
  }
]

App\Twig\Components\BoostComponent {#3556
  +formDest: "entry"
  +subject: App\Entity\Entry {#2419
    +user: Proxies\__CG__\App\Entity\User {#1970
      +avatar: null
      +cover: null
      +email: "robin@beehaw.org"
      +username: "@robin@beehaw.org"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1702223876 {#1536
        date: 2023-12-10 16:57:56.0 +01:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#1518 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#1520 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#1632 …}
      +entries: Doctrine\ORM\PersistentCollection {#1631 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#1704 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#1712 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#1468 …}
      +posts: Doctrine\ORM\PersistentCollection {#1659 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#1487 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1767 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1638 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1492 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1634 …}
      +follows: Doctrine\ORM\PersistentCollection {#1660 …}
      +followers: Doctrine\ORM\PersistentCollection {#1627 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1419 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1412 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1453 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1432 …}
      +reports: Doctrine\ORM\PersistentCollection {#1425 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1435 …}
      +violations: Doctrine\ORM\PersistentCollection {#1699 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1703 …}
      +awards: Doctrine\ORM\PersistentCollection {#1430 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1595 …}
      +categories: Doctrine\ORM\PersistentCollection {#1645 …}
      -id: 81695
      -password: "$2y$13$uv.H2o9.pNAWi2JY6kYXp.LtkmQOHvkqhJuq0rJqjWt471Wh3NNFC"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1678 …}
      +apId: "robin@beehaw.org"
      +apProfileId: "https://beehaw.org/u/robin"
      +apPublicUrl: "https://beehaw.org/u/robin"
      +apFollowersUrl: null
      +apInboxUrl: "https://beehaw.org/inbox"
      +apDomain: "beehaw.org"
      +apPreferredUsername: "robin"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1702223876 {#1515
        date: 2023-12-10 16:57:56.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1702223875 {#1516
        date: 2023-12-10 16:57:55.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Any-advice-on-running-a-pubnix-tilde"
    +title: "Any advice on running a pubnix/tilde?"
    +url: null
    +body: """
      I’m thinking about running my own pubnix/tilde. It would be invite-only and have a bunch of cool things:\n
      \n
      - git hosting with cgit or sourcehut\n
      - gemini hosting\n
      - web hosting\n
      - gopher hosting\n
      - FTP access\n
      - about 2GB of storage\n
      - matrix accounts + chat portal (Hydrogen seems cool)\n
      - internal message board/email?\n
      - maybe a CardDAV server?\n
      \n
      I think it would be a very cool opportunity to learn a bit about Linux and the internet. However, I literally have *no clue* how to set this up. I found this comment on Reddit:\n
      \n
      > It happens that you’re trying to build a tilde/pubnix? From my experience, tilde admins often give direct access to the system, but with proper permission elevation. Create a user group with limited permission (i.e. no sudo, disable specific software) and add their usernames to, give them a space in /home. Secondly, disable SSH passwords, ask them to send you their public keys, and only authenticate via public key. Finally, write a good/strict policy but also send a welcoming message. Also, you can look for further security practices, like changing default port, etc. but the key thing is proper user permission.\n
      \n
      That’s what I want. I was thinking about allowing password logins tho. I already have a VPS, which I want to reinstall to turn into this thing.\n
      \n
      I basically want to configure the services in a way, that they all depend on Unix accounts. That way I can create a Unix account with suitable permissions for every member, and stuff should Just Work™.\n
      \n
      So, I was thinking:\n
      \n
      - Exposing all git repos in `~/git/` at the URL `http(s)://git.example.com/~user/` (using cgit) and `gemini://git.example.com/~user/` (using git.gmi)\n
      - Exposing `~/pub/gem/` at `gemini://example.com/~user/`\n
      - Exposing `~/pub/web/` at `http(s)://example.com/~user/`\n
      - Exposing `~/pub/goph` at `gopher://example.com/~user/`\n
      - Creating `@user:example.com` matrix account with the same password as Unix. Changing the Unix password will also change the matrix password and changing the password from a matrix client should not be allowed.\n
      - Hosting Hydrogen (matrix client) at `https://chat.example.com`\n
      - Maybe host a CardDAV server with an account for every user, similar to what I want for matrix.\n
      \n
      Any pointers on how to set up something like this? How would I handle backups? (I know I can just backup all files in every member’s home directory, but how would I handle something more complicated, like the matrix accounts?). How would I make something like this secure?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 1
    +favouriteCount: 0
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1697723274 {#2414
      date: 2023-10-19 15:47:54.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: [
      "@user"
    ]
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 18324
    -titleTs: "'advic':2 'pubnix/tilde':6 'run':4"
    -bodyTs: "'/example.com/~user':289 '/git':263 '/git.example.com/~user':269 '/home':139 '/pub/gem':279 '/pub/goph':291 '/pub/web':285 '/~user/':275,283,295 '2gb':37 'access':35,107 'account':41,234,242,300,342,393 'add':130 'admin':103 'allow':199,328 'alreadi':204 'also':164,169,312 'ask':144 'authent':154 'backup':367,373 'basic':219 'bit':66 'board/email':49 'build':96 'bunch':18 'carddav':52,338 'cgit':25,271 'chang':178,307,313,318 'chat':42 'chat.example.com':334 'client':324,332 'clue':77 'comment':86 'complic':389 'configur':222 'cool':20,46,61 'creat':116,239,296 'default':179 'depend':231 'direct':106 'directori':381 'disabl':126,141 'elev':115 'etc':181 'everi':247,344,377 'example.com':282,294,298 'example.com/~user/':281,293 'experi':101 'expos':258,278,284,290 'file':375 'final':158 'found':84 'ftp':34 'gemini':28 'git':22,260 'git.example.com':274 'git.example.com/~user/':273 'git.gmi':277 'give':105,134 'good/strict':161 'gopher':32 'group':119 'handl':366,386 'happen':90 'home':380 'host':23,29,31,33,329,336 'howev':72 'http':267,287 'hydrogen':44,330 'i.e':123 'intern':47 'internet':71 'invit':13 'invite-on':12 'key':151,157,184 'know':369 'learn':64 'like':177,361,390,399 'limit':121 'linux':68 'liter':74 'login':201 'look':172 'm':2 'make':397 'matrix':40,299,315,323,331,352,392 'mayb':50,335 'member':248,378 'messag':48,168 'often':104 'opportun':62 'password':143,200,304,310,316,320 'permiss':114,122,189,245 'pointer':354 'polici':162 'port':180 'portal':43 'practic':176 'proper':113,187 'public':150,156 'pubnix/tilde':8 're':93 'reddit':88 'reinstal':212 'repo':261 'run':5 'second':140 'secur':175,401 'seem':45 'send':147,165 'server':53,339 'servic':224 'set':80,358 'similar':346 'softwar':128 'someth':360,387,398 'sourcehut':27 'space':137 'specif':127 'ssh':142 'storag':39 'stuff':250 'sudo':125 'suitabl':244 'system':110 'thing':21,185,217 'think':3,55,197,257 'tho':202 'tild':102 'tilde/pubnix':98 'tri':94 'turn':214 'unix':233,241,306,309 'url':266 'use':270,276 'user':118,188,297,345 'usernam':132 'via':155 'vps':207 'want':194,210,220,350 'way':227,236 'web':30 'welcom':167 'work':253 'would':10,57,364,384,395 'write':159"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1697628085
    +visibility: "visible             "
    +apId: "https://beehaw.org/post/8820647"
    +editedAt: null
    +createdAt: DateTimeImmutable @1697621585 {#1793
      date: 2023-10-18 11:33:05.0 +02:00
    }
  }
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
}

[
  "entry" => App\Entity\Entry {#2419
    +user: Proxies\__CG__\App\Entity\User {#1970
      +avatar: null
      +cover: null
      +email: "robin@beehaw.org"
      +username: "@robin@beehaw.org"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1702223876 {#1536
        date: 2023-12-10 16:57:56.0 +01:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#1518 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#1520 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#1632 …}
      +entries: Doctrine\ORM\PersistentCollection {#1631 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#1704 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#1712 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#1468 …}
      +posts: Doctrine\ORM\PersistentCollection {#1659 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#1487 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1767 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1638 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1492 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1634 …}
      +follows: Doctrine\ORM\PersistentCollection {#1660 …}
      +followers: Doctrine\ORM\PersistentCollection {#1627 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1419 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1412 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1453 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1432 …}
      +reports: Doctrine\ORM\PersistentCollection {#1425 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1435 …}
      +violations: Doctrine\ORM\PersistentCollection {#1699 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1703 …}
      +awards: Doctrine\ORM\PersistentCollection {#1430 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1595 …}
      +categories: Doctrine\ORM\PersistentCollection {#1645 …}
      -id: 81695
      -password: "$2y$13$uv.H2o9.pNAWi2JY6kYXp.LtkmQOHvkqhJuq0rJqjWt471Wh3NNFC"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1678 …}
      +apId: "robin@beehaw.org"
      +apProfileId: "https://beehaw.org/u/robin"
      +apPublicUrl: "https://beehaw.org/u/robin"
      +apFollowersUrl: null
      +apInboxUrl: "https://beehaw.org/inbox"
      +apDomain: "beehaw.org"
      +apPreferredUsername: "robin"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1702223876 {#1515
        date: 2023-12-10 16:57:56.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1702223875 {#1516
        date: 2023-12-10 16:57:55.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Any-advice-on-running-a-pubnix-tilde"
    +title: "Any advice on running a pubnix/tilde?"
    +url: null
    +body: """
      I’m thinking about running my own pubnix/tilde. It would be invite-only and have a bunch of cool things:\n
      \n
      - git hosting with cgit or sourcehut\n
      - gemini hosting\n
      - web hosting\n
      - gopher hosting\n
      - FTP access\n
      - about 2GB of storage\n
      - matrix accounts + chat portal (Hydrogen seems cool)\n
      - internal message board/email?\n
      - maybe a CardDAV server?\n
      \n
      I think it would be a very cool opportunity to learn a bit about Linux and the internet. However, I literally have *no clue* how to set this up. I found this comment on Reddit:\n
      \n
      > It happens that you’re trying to build a tilde/pubnix? From my experience, tilde admins often give direct access to the system, but with proper permission elevation. Create a user group with limited permission (i.e. no sudo, disable specific software) and add their usernames to, give them a space in /home. Secondly, disable SSH passwords, ask them to send you their public keys, and only authenticate via public key. Finally, write a good/strict policy but also send a welcoming message. Also, you can look for further security practices, like changing default port, etc. but the key thing is proper user permission.\n
      \n
      That’s what I want. I was thinking about allowing password logins tho. I already have a VPS, which I want to reinstall to turn into this thing.\n
      \n
      I basically want to configure the services in a way, that they all depend on Unix accounts. That way I can create a Unix account with suitable permissions for every member, and stuff should Just Work™.\n
      \n
      So, I was thinking:\n
      \n
      - Exposing all git repos in `~/git/` at the URL `http(s)://git.example.com/~user/` (using cgit) and `gemini://git.example.com/~user/` (using git.gmi)\n
      - Exposing `~/pub/gem/` at `gemini://example.com/~user/`\n
      - Exposing `~/pub/web/` at `http(s)://example.com/~user/`\n
      - Exposing `~/pub/goph` at `gopher://example.com/~user/`\n
      - Creating `@user:example.com` matrix account with the same password as Unix. Changing the Unix password will also change the matrix password and changing the password from a matrix client should not be allowed.\n
      - Hosting Hydrogen (matrix client) at `https://chat.example.com`\n
      - Maybe host a CardDAV server with an account for every user, similar to what I want for matrix.\n
      \n
      Any pointers on how to set up something like this? How would I handle backups? (I know I can just backup all files in every member’s home directory, but how would I handle something more complicated, like the matrix accounts?). How would I make something like this secure?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 1
    +favouriteCount: 0
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1697723274 {#2414
      date: 2023-10-19 15:47:54.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: [
      "@user"
    ]
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 18324
    -titleTs: "'advic':2 'pubnix/tilde':6 'run':4"
    -bodyTs: "'/example.com/~user':289 '/git':263 '/git.example.com/~user':269 '/home':139 '/pub/gem':279 '/pub/goph':291 '/pub/web':285 '/~user/':275,283,295 '2gb':37 'access':35,107 'account':41,234,242,300,342,393 'add':130 'admin':103 'allow':199,328 'alreadi':204 'also':164,169,312 'ask':144 'authent':154 'backup':367,373 'basic':219 'bit':66 'board/email':49 'build':96 'bunch':18 'carddav':52,338 'cgit':25,271 'chang':178,307,313,318 'chat':42 'chat.example.com':334 'client':324,332 'clue':77 'comment':86 'complic':389 'configur':222 'cool':20,46,61 'creat':116,239,296 'default':179 'depend':231 'direct':106 'directori':381 'disabl':126,141 'elev':115 'etc':181 'everi':247,344,377 'example.com':282,294,298 'example.com/~user/':281,293 'experi':101 'expos':258,278,284,290 'file':375 'final':158 'found':84 'ftp':34 'gemini':28 'git':22,260 'git.example.com':274 'git.example.com/~user/':273 'git.gmi':277 'give':105,134 'good/strict':161 'gopher':32 'group':119 'handl':366,386 'happen':90 'home':380 'host':23,29,31,33,329,336 'howev':72 'http':267,287 'hydrogen':44,330 'i.e':123 'intern':47 'internet':71 'invit':13 'invite-on':12 'key':151,157,184 'know':369 'learn':64 'like':177,361,390,399 'limit':121 'linux':68 'liter':74 'login':201 'look':172 'm':2 'make':397 'matrix':40,299,315,323,331,352,392 'mayb':50,335 'member':248,378 'messag':48,168 'often':104 'opportun':62 'password':143,200,304,310,316,320 'permiss':114,122,189,245 'pointer':354 'polici':162 'port':180 'portal':43 'practic':176 'proper':113,187 'public':150,156 'pubnix/tilde':8 're':93 'reddit':88 'reinstal':212 'repo':261 'run':5 'second':140 'secur':175,401 'seem':45 'send':147,165 'server':53,339 'servic':224 'set':80,358 'similar':346 'softwar':128 'someth':360,387,398 'sourcehut':27 'space':137 'specif':127 'ssh':142 'storag':39 'stuff':250 'sudo':125 'suitabl':244 'system':110 'thing':21,185,217 'think':3,55,197,257 'tho':202 'tild':102 'tilde/pubnix':98 'tri':94 'turn':214 'unix':233,241,306,309 'url':266 'use':270,276 'user':118,188,297,345 'usernam':132 'via':155 'vps':207 'want':194,210,220,350 'way':227,236 'web':30 'welcom':167 'work':253 'would':10,57,364,384,395 'write':159"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1697628085
    +visibility: "visible             "
    +apId: "https://beehaw.org/post/8820647"
    +editedAt: null
    +createdAt: DateTimeImmutable @1697621585 {#1793
      date: 2023-10-18 11:33:05.0 +02:00
    }
  }
]

App\Twig\Components\EntriesCrossComponent {#3870
  +entry: App\Entity\Entry {#2419
    +user: Proxies\__CG__\App\Entity\User {#1970
      +avatar: null
      +cover: null
      +email: "robin@beehaw.org"
      +username: "@robin@beehaw.org"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1702223876 {#1536
        date: 2023-12-10 16:57:56.0 +01:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#1518 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#1520 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#1632 …}
      +entries: Doctrine\ORM\PersistentCollection {#1631 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#1704 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#1712 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#1468 …}
      +posts: Doctrine\ORM\PersistentCollection {#1659 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#1487 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1767 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1638 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1492 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1634 …}
      +follows: Doctrine\ORM\PersistentCollection {#1660 …}
      +followers: Doctrine\ORM\PersistentCollection {#1627 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1419 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1412 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1453 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1432 …}
      +reports: Doctrine\ORM\PersistentCollection {#1425 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1435 …}
      +violations: Doctrine\ORM\PersistentCollection {#1699 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1703 …}
      +awards: Doctrine\ORM\PersistentCollection {#1430 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1595 …}
      +categories: Doctrine\ORM\PersistentCollection {#1645 …}
      -id: 81695
      -password: "$2y$13$uv.H2o9.pNAWi2JY6kYXp.LtkmQOHvkqhJuq0rJqjWt471Wh3NNFC"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1678 …}
      +apId: "robin@beehaw.org"
      +apProfileId: "https://beehaw.org/u/robin"
      +apPublicUrl: "https://beehaw.org/u/robin"
      +apFollowersUrl: null
      +apInboxUrl: "https://beehaw.org/inbox"
      +apDomain: "beehaw.org"
      +apPreferredUsername: "robin"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1702223876 {#1515
        date: 2023-12-10 16:57:56.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1702223875 {#1516
        date: 2023-12-10 16:57:55.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: App\Entity\Magazine {#265
      +icon: Proxies\__CG__\App\Entity\Image {#246 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#275
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#237 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
      +entries: Doctrine\ORM\PersistentCollection {#180 …}
      +posts: Doctrine\ORM\PersistentCollection {#138 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
      +bans: Doctrine\ORM\PersistentCollection {#117 …}
      +reports: Doctrine\ORM\PersistentCollection {#103 …}
      +badges: Doctrine\ORM\PersistentCollection {#81 …}
      +logs: Doctrine\ORM\PersistentCollection {#71 …}
      +awards: Doctrine\ORM\PersistentCollection {#1346 …}
      +categories: Doctrine\ORM\PersistentCollection {#1823 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#269
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#271
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Any-advice-on-running-a-pubnix-tilde"
    +title: "Any advice on running a pubnix/tilde?"
    +url: null
    +body: """
      I’m thinking about running my own pubnix/tilde. It would be invite-only and have a bunch of cool things:\n
      \n
      - git hosting with cgit or sourcehut\n
      - gemini hosting\n
      - web hosting\n
      - gopher hosting\n
      - FTP access\n
      - about 2GB of storage\n
      - matrix accounts + chat portal (Hydrogen seems cool)\n
      - internal message board/email?\n
      - maybe a CardDAV server?\n
      \n
      I think it would be a very cool opportunity to learn a bit about Linux and the internet. However, I literally have *no clue* how to set this up. I found this comment on Reddit:\n
      \n
      > It happens that you’re trying to build a tilde/pubnix? From my experience, tilde admins often give direct access to the system, but with proper permission elevation. Create a user group with limited permission (i.e. no sudo, disable specific software) and add their usernames to, give them a space in /home. Secondly, disable SSH passwords, ask them to send you their public keys, and only authenticate via public key. Finally, write a good/strict policy but also send a welcoming message. Also, you can look for further security practices, like changing default port, etc. but the key thing is proper user permission.\n
      \n
      That’s what I want. I was thinking about allowing password logins tho. I already have a VPS, which I want to reinstall to turn into this thing.\n
      \n
      I basically want to configure the services in a way, that they all depend on Unix accounts. That way I can create a Unix account with suitable permissions for every member, and stuff should Just Work™.\n
      \n
      So, I was thinking:\n
      \n
      - Exposing all git repos in `~/git/` at the URL `http(s)://git.example.com/~user/` (using cgit) and `gemini://git.example.com/~user/` (using git.gmi)\n
      - Exposing `~/pub/gem/` at `gemini://example.com/~user/`\n
      - Exposing `~/pub/web/` at `http(s)://example.com/~user/`\n
      - Exposing `~/pub/goph` at `gopher://example.com/~user/`\n
      - Creating `@user:example.com` matrix account with the same password as Unix. Changing the Unix password will also change the matrix password and changing the password from a matrix client should not be allowed.\n
      - Hosting Hydrogen (matrix client) at `https://chat.example.com`\n
      - Maybe host a CardDAV server with an account for every user, similar to what I want for matrix.\n
      \n
      Any pointers on how to set up something like this? How would I handle backups? (I know I can just backup all files in every member’s home directory, but how would I handle something more complicated, like the matrix accounts?). How would I make something like this secure?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 1
    +favouriteCount: 0
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1697723274 {#2414
      date: 2023-10-19 15:47:54.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: [
      "@user"
    ]
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 18324
    -titleTs: "'advic':2 'pubnix/tilde':6 'run':4"
    -bodyTs: "'/example.com/~user':289 '/git':263 '/git.example.com/~user':269 '/home':139 '/pub/gem':279 '/pub/goph':291 '/pub/web':285 '/~user/':275,283,295 '2gb':37 'access':35,107 'account':41,234,242,300,342,393 'add':130 'admin':103 'allow':199,328 'alreadi':204 'also':164,169,312 'ask':144 'authent':154 'backup':367,373 'basic':219 'bit':66 'board/email':49 'build':96 'bunch':18 'carddav':52,338 'cgit':25,271 'chang':178,307,313,318 'chat':42 'chat.example.com':334 'client':324,332 'clue':77 'comment':86 'complic':389 'configur':222 'cool':20,46,61 'creat':116,239,296 'default':179 'depend':231 'direct':106 'directori':381 'disabl':126,141 'elev':115 'etc':181 'everi':247,344,377 'example.com':282,294,298 'example.com/~user/':281,293 'experi':101 'expos':258,278,284,290 'file':375 'final':158 'found':84 'ftp':34 'gemini':28 'git':22,260 'git.example.com':274 'git.example.com/~user/':273 'git.gmi':277 'give':105,134 'good/strict':161 'gopher':32 'group':119 'handl':366,386 'happen':90 'home':380 'host':23,29,31,33,329,336 'howev':72 'http':267,287 'hydrogen':44,330 'i.e':123 'intern':47 'internet':71 'invit':13 'invite-on':12 'key':151,157,184 'know':369 'learn':64 'like':177,361,390,399 'limit':121 'linux':68 'liter':74 'login':201 'look':172 'm':2 'make':397 'matrix':40,299,315,323,331,352,392 'mayb':50,335 'member':248,378 'messag':48,168 'often':104 'opportun':62 'password':143,200,304,310,316,320 'permiss':114,122,189,245 'pointer':354 'polici':162 'port':180 'portal':43 'practic':176 'proper':113,187 'public':150,156 'pubnix/tilde':8 're':93 'reddit':88 'reinstal':212 'repo':261 'run':5 'second':140 'secur':175,401 'seem':45 'send':147,165 'server':53,339 'servic':224 'set':80,358 'similar':346 'softwar':128 'someth':360,387,398 'sourcehut':27 'space':137 'specif':127 'ssh':142 'storag':39 'stuff':250 'sudo':125 'suitabl':244 'system':110 'thing':21,185,217 'think':3,55,197,257 'tho':202 'tild':102 'tilde/pubnix':98 'tri':94 'turn':214 'unix':233,241,306,309 'url':266 'use':270,276 'user':118,188,297,345 'usernam':132 'via':155 'vps':207 'want':194,210,220,350 'way':227,236 'web':30 'welcom':167 'work':253 'would':10,57,364,384,395 'write':159"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1697628085
    +visibility: "visible             "
    +apId: "https://beehaw.org/post/8820647"
    +editedAt: null
    +createdAt: DateTimeImmutable @1697621585 {#1793
      date: 2023-10-18 11:33:05.0 +02:00
    }
  }
  -repository: App\Repository\EntryRepository {#270 …}
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
  -twig: Twig\Environment {#1252 …}
  -requestStack: Symfony\Component\HttpFoundation\RequestStack {#1328 …}
  -security: Symfony\Bundle\SecurityBundle\Security {#1101 …}
}

[
  "id" => "entry_comment_687f5283833a83.02779925_body"
]

App\Twig\Components\EditorToolbarComponent {#3967
  +id: "entry_comment_687f5283833a83.02779925_body"
}

[
  "comment" => App\Entity\EntryComment {#4179
    +user: App\Entity\User {#4127
      +avatar: null
      +cover: null
      +email: "kraniax@lemmy.wtf"
      +username: "@kraniax@lemmy.wtf"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1703702818 {#4187
        date: 2023-12-27 19:46:58.0 +01:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#4128 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#4131 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#4123 …}
      +entries: Doctrine\ORM\PersistentCollection {#4121 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#4119 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#4116 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#4114 …}
      +posts: Doctrine\ORM\PersistentCollection {#4111 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#4109 …}
      +postComments: Doctrine\ORM\PersistentCollection {#4107 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#4104 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#4102 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#4100 …}
      +follows: Doctrine\ORM\PersistentCollection {#4243 …}
      +followers: Doctrine\ORM\PersistentCollection {#4239 …}
      +blocks: Doctrine\ORM\PersistentCollection {#4228 …}
      +blockers: Doctrine\ORM\PersistentCollection {#4219 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#4208 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#4245 …}
      +reports: Doctrine\ORM\PersistentCollection {#4242 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4205 …}
      +violations: Doctrine\ORM\PersistentCollection {#4232 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4235 …}
      +awards: Doctrine\ORM\PersistentCollection {#4233 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#4231 …}
      +categories: Doctrine\ORM\PersistentCollection {#4230 …}
      -id: 61312
      -password: "$2y$13$.w/YWmvY5B.MBgives7BxuNOOx43cOWt/VE3FGMgyEmG48JGF7woe"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#4223 …}
      +apId: "kraniax@lemmy.wtf"
      +apProfileId: "https://lemmy.wtf/u/kraniax"
      +apPublicUrl: "https://lemmy.wtf/u/kraniax"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.wtf/inbox"
      +apDomain: "lemmy.wtf"
      +apPreferredUsername: "kraniax"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1708497763 {#4183
        date: 2024-02-21 07:42:43.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1697554889 {#4181
        date: 2023-10-17 17:01:29.0 +02:00
      }
    }
    +entry: App\Entity\Entry {#2419
      +user: Proxies\__CG__\App\Entity\User {#1970
        +avatar: null
        +cover: null
        +email: "robin@beehaw.org"
        +username: "@robin@beehaw.org"
        +roles: []
        +followersCount: 0
        +homepage: "front"
        +about: null
        +lastActive: DateTime @1702223876 {#1536
          date: 2023-12-10 16:57:56.0 +01:00
        }
        +markedForDeletionAt: null
        +fields: null
        +oauthGithubId: null
        +oauthGoogleId: null
        +oauthFacebookId: null
        +oauthKeycloakId: null
        +hideAdult: true
        +showSubscribedUsers: true
        +showSubscribedMagazines: true
        +showSubscribedDomains: true
        +preferredLanguages: []
        +featuredMagazines: null
        +showProfileSubscriptions: false
        +showProfileFollowings: true
        +markNewComments: false
        +notifyOnNewEntry: false
        +notifyOnNewEntryReply: true
        +notifyOnNewEntryCommentReply: true
        +notifyOnNewPost: false
        +notifyOnNewPostReply: true
        +notifyOnNewPostCommentReply: true
        +addMentionsEntries: false
        +addMentionsPosts: true
        +isBanned: false
        +isVerified: false
        +isDeleted: false
        +isBot: false
        +spamProtection: true
        +customCss: null
        +ignoreMagazinesCustomCss: false
        +moderatorTokens: Doctrine\ORM\PersistentCollection {#1518 …}
        +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#1520 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#1632 …}
        +entries: Doctrine\ORM\PersistentCollection {#1631 …}
        +entryVotes: Doctrine\ORM\PersistentCollection {#1704 …}
        +entryComments: Doctrine\ORM\PersistentCollection {#1712 …}
        +entryCommentVotes: Doctrine\ORM\PersistentCollection {#1468 …}
        +posts: Doctrine\ORM\PersistentCollection {#1659 …}
        +postVotes: Doctrine\ORM\PersistentCollection {#1487 …}
        +postComments: Doctrine\ORM\PersistentCollection {#1767 …}
        +postCommentVotes: Doctrine\ORM\PersistentCollection {#1638 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#1492 …}
        +subscribedDomains: Doctrine\ORM\PersistentCollection {#1634 …}
        +follows: Doctrine\ORM\PersistentCollection {#1660 …}
        +followers: Doctrine\ORM\PersistentCollection {#1627 …}
        +blocks: Doctrine\ORM\PersistentCollection {#1419 …}
        +blockers: Doctrine\ORM\PersistentCollection {#1412 …}
        +blockedMagazines: Doctrine\ORM\PersistentCollection {#1453 …}
        +blockedDomains: Doctrine\ORM\PersistentCollection {#1432 …}
        +reports: Doctrine\ORM\PersistentCollection {#1425 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1435 …}
        +violations: Doctrine\ORM\PersistentCollection {#1699 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1703 …}
        +awards: Doctrine\ORM\PersistentCollection {#1430 …}
        +subscribedCategories: Doctrine\ORM\PersistentCollection {#1595 …}
        +categories: Doctrine\ORM\PersistentCollection {#1645 …}
        -id: 81695
        -password: "$2y$13$uv.H2o9.pNAWi2JY6kYXp.LtkmQOHvkqhJuq0rJqjWt471Wh3NNFC"
        -totpSecret: null
        -totpBackupCodes: []
        -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1678 …}
        +apId: "robin@beehaw.org"
        +apProfileId: "https://beehaw.org/u/robin"
        +apPublicUrl: "https://beehaw.org/u/robin"
        +apFollowersUrl: null
        +apInboxUrl: "https://beehaw.org/inbox"
        +apDomain: "beehaw.org"
        +apPreferredUsername: "robin"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: false
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1702223876 {#1515
          date: 2023-12-10 16:57:56.0 +01:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1702223875 {#1516
          date: 2023-12-10 16:57:55.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +magazine: App\Entity\Magazine {#265
        +icon: Proxies\__CG__\App\Entity\Image {#246 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#275
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#237 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
        +entries: Doctrine\ORM\PersistentCollection {#180 …}
        +posts: Doctrine\ORM\PersistentCollection {#138 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
        +bans: Doctrine\ORM\PersistentCollection {#117 …}
        +reports: Doctrine\ORM\PersistentCollection {#103 …}
        +badges: Doctrine\ORM\PersistentCollection {#81 …}
        +logs: Doctrine\ORM\PersistentCollection {#71 …}
        +awards: Doctrine\ORM\PersistentCollection {#1346 …}
        +categories: Doctrine\ORM\PersistentCollection {#1823 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#269
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#271
          date: 2023-11-02 13:51:08.0 +01:00
        }
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
      +slug: "Any-advice-on-running-a-pubnix-tilde"
      +title: "Any advice on running a pubnix/tilde?"
      +url: null
      +body: """
        I’m thinking about running my own pubnix/tilde. It would be invite-only and have a bunch of cool things:\n
        \n
        - git hosting with cgit or sourcehut\n
        - gemini hosting\n
        - web hosting\n
        - gopher hosting\n
        - FTP access\n
        - about 2GB of storage\n
        - matrix accounts + chat portal (Hydrogen seems cool)\n
        - internal message board/email?\n
        - maybe a CardDAV server?\n
        \n
        I think it would be a very cool opportunity to learn a bit about Linux and the internet. However, I literally have *no clue* how to set this up. I found this comment on Reddit:\n
        \n
        > It happens that you’re trying to build a tilde/pubnix? From my experience, tilde admins often give direct access to the system, but with proper permission elevation. Create a user group with limited permission (i.e. no sudo, disable specific software) and add their usernames to, give them a space in /home. Secondly, disable SSH passwords, ask them to send you their public keys, and only authenticate via public key. Finally, write a good/strict policy but also send a welcoming message. Also, you can look for further security practices, like changing default port, etc. but the key thing is proper user permission.\n
        \n
        That’s what I want. I was thinking about allowing password logins tho. I already have a VPS, which I want to reinstall to turn into this thing.\n
        \n
        I basically want to configure the services in a way, that they all depend on Unix accounts. That way I can create a Unix account with suitable permissions for every member, and stuff should Just Work™.\n
        \n
        So, I was thinking:\n
        \n
        - Exposing all git repos in `~/git/` at the URL `http(s)://git.example.com/~user/` (using cgit) and `gemini://git.example.com/~user/` (using git.gmi)\n
        - Exposing `~/pub/gem/` at `gemini://example.com/~user/`\n
        - Exposing `~/pub/web/` at `http(s)://example.com/~user/`\n
        - Exposing `~/pub/goph` at `gopher://example.com/~user/`\n
        - Creating `@user:example.com` matrix account with the same password as Unix. Changing the Unix password will also change the matrix password and changing the password from a matrix client should not be allowed.\n
        - Hosting Hydrogen (matrix client) at `https://chat.example.com`\n
        - Maybe host a CardDAV server with an account for every user, similar to what I want for matrix.\n
        \n
        Any pointers on how to set up something like this? How would I handle backups? (I know I can just backup all files in every member’s home directory, but how would I handle something more complicated, like the matrix accounts?). How would I make something like this secure?
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 1
      +favouriteCount: 0
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1697723274 {#2414
        date: 2023-10-19 15:47:54.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: [
        "@user"
      ]
      +comments: Doctrine\ORM\PersistentCollection {#1884 …}
      +votes: Doctrine\ORM\PersistentCollection {#1973 …}
      +reports: Doctrine\ORM\PersistentCollection {#1959 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
      +badges: Doctrine\ORM\PersistentCollection {#2440 …}
      +children: []
      -id: 18324
      -titleTs: "'advic':2 'pubnix/tilde':6 'run':4"
      -bodyTs: "'/example.com/~user':289 '/git':263 '/git.example.com/~user':269 '/home':139 '/pub/gem':279 '/pub/goph':291 '/pub/web':285 '/~user/':275,283,295 '2gb':37 'access':35,107 'account':41,234,242,300,342,393 'add':130 'admin':103 'allow':199,328 'alreadi':204 'also':164,169,312 'ask':144 'authent':154 'backup':367,373 'basic':219 'bit':66 'board/email':49 'build':96 'bunch':18 'carddav':52,338 'cgit':25,271 'chang':178,307,313,318 'chat':42 'chat.example.com':334 'client':324,332 'clue':77 'comment':86 'complic':389 'configur':222 'cool':20,46,61 'creat':116,239,296 'default':179 'depend':231 'direct':106 'directori':381 'disabl':126,141 'elev':115 'etc':181 'everi':247,344,377 'example.com':282,294,298 'example.com/~user/':281,293 'experi':101 'expos':258,278,284,290 'file':375 'final':158 'found':84 'ftp':34 'gemini':28 'git':22,260 'git.example.com':274 'git.example.com/~user/':273 'git.gmi':277 'give':105,134 'good/strict':161 'gopher':32 'group':119 'handl':366,386 'happen':90 'home':380 'host':23,29,31,33,329,336 'howev':72 'http':267,287 'hydrogen':44,330 'i.e':123 'intern':47 'internet':71 'invit':13 'invite-on':12 'key':151,157,184 'know':369 'learn':64 'like':177,361,390,399 'limit':121 'linux':68 'liter':74 'login':201 'look':172 'm':2 'make':397 'matrix':40,299,315,323,331,352,392 'mayb':50,335 'member':248,378 'messag':48,168 'often':104 'opportun':62 'password':143,200,304,310,316,320 'permiss':114,122,189,245 'pointer':354 'polici':162 'port':180 'portal':43 'practic':176 'proper':113,187 'public':150,156 'pubnix/tilde':8 're':93 'reddit':88 'reinstal':212 'repo':261 'run':5 'second':140 'secur':175,401 'seem':45 'send':147,165 'server':53,339 'servic':224 'set':80,358 'similar':346 'softwar':128 'someth':360,387,398 'sourcehut':27 'space':137 'specif':127 'ssh':142 'storag':39 'stuff':250 'sudo':125 'suitabl':244 'system':110 'thing':21,185,217 'think':3,55,197,257 'tho':202 'tild':102 'tilde/pubnix':98 'tri':94 'turn':214 'unix':233,241,306,309 'url':266 'use':270,276 'user':118,188,297,345 'usernam':132 'via':155 'vps':207 'want':194,210,220,350 'way':227,236 'web':30 'welcom':167 'work':253 'would':10,57,364,384,395 'write':159"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1697628085
      +visibility: "visible             "
      +apId: "https://beehaw.org/post/8820647"
      +editedAt: null
      +createdAt: DateTimeImmutable @1697621585 {#1793
        date: 2023-10-18 11:33:05.0 +02:00
      }
    }
    +magazine: App\Entity\Magazine {#265}
    +image: null
    +parent: null
    +root: null
    +body: "XMPP is a must. I automatically discard tildes that host matrix but not XMPP."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1697723274 {#4188
      date: 2023-10-19 15:47:54.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@user"
      "@robin@beehaw.org"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4177 …}
    +nested: Doctrine\ORM\PersistentCollection {#4175 …}
    +votes: Doctrine\ORM\PersistentCollection {#4173 …}
    +reports: Doctrine\ORM\PersistentCollection {#4171 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4139 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4143 …}
    -id: 216626
    -bodyTs: "'automat':6 'discard':7 'host':10 'matrix':11 'must':4 'tild':8 'xmpp':1,14"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.wtf/comment/2597483"
    +editedAt: null
    +createdAt: DateTimeImmutable @1697723274 {#4124
      date: 2023-10-19 15:47:54.0 +02:00
    }
  }
  "showNested" => true
  "dateAsUrl" => false
  "showMagazineName" => false
  "showEntryTitle" => false
]

App\Twig\Components\EntryCommentComponent {#4199
  +comment: App\Entity\EntryComment {#4179
    +user: App\Entity\User {#4127
      +avatar: null
      +cover: null
      +email: "kraniax@lemmy.wtf"
      +username: "@kraniax@lemmy.wtf"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1703702818 {#4187
        date: 2023-12-27 19:46:58.0 +01:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#4128 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#4131 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#4123 …}
      +entries: Doctrine\ORM\PersistentCollection {#4121 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#4119 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#4116 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#4114 …}
      +posts: Doctrine\ORM\PersistentCollection {#4111 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#4109 …}
      +postComments: Doctrine\ORM\PersistentCollection {#4107 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#4104 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#4102 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#4100 …}
      +follows: Doctrine\ORM\PersistentCollection {#4243 …}
      +followers: Doctrine\ORM\PersistentCollection {#4239 …}
      +blocks: Doctrine\ORM\PersistentCollection {#4228 …}
      +blockers: Doctrine\ORM\PersistentCollection {#4219 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#4208 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#4245 …}
      +reports: Doctrine\ORM\PersistentCollection {#4242 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4205 …}
      +violations: Doctrine\ORM\PersistentCollection {#4232 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4235 …}
      +awards: Doctrine\ORM\PersistentCollection {#4233 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#4231 …}
      +categories: Doctrine\ORM\PersistentCollection {#4230 …}
      -id: 61312
      -password: "$2y$13$.w/YWmvY5B.MBgives7BxuNOOx43cOWt/VE3FGMgyEmG48JGF7woe"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#4223 …}
      +apId: "kraniax@lemmy.wtf"
      +apProfileId: "https://lemmy.wtf/u/kraniax"
      +apPublicUrl: "https://lemmy.wtf/u/kraniax"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.wtf/inbox"
      +apDomain: "lemmy.wtf"
      +apPreferredUsername: "kraniax"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1708497763 {#4183
        date: 2024-02-21 07:42:43.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1697554889 {#4181
        date: 2023-10-17 17:01:29.0 +02:00
      }
    }
    +entry: App\Entity\Entry {#2419
      +user: Proxies\__CG__\App\Entity\User {#1970
        +avatar: null
        +cover: null
        +email: "robin@beehaw.org"
        +username: "@robin@beehaw.org"
        +roles: []
        +followersCount: 0
        +homepage: "front"
        +about: null
        +lastActive: DateTime @1702223876 {#1536
          date: 2023-12-10 16:57:56.0 +01:00
        }
        +markedForDeletionAt: null
        +fields: null
        +oauthGithubId: null
        +oauthGoogleId: null
        +oauthFacebookId: null
        +oauthKeycloakId: null
        +hideAdult: true
        +showSubscribedUsers: true
        +showSubscribedMagazines: true
        +showSubscribedDomains: true
        +preferredLanguages: []
        +featuredMagazines: null
        +showProfileSubscriptions: false
        +showProfileFollowings: true
        +markNewComments: false
        +notifyOnNewEntry: false
        +notifyOnNewEntryReply: true
        +notifyOnNewEntryCommentReply: true
        +notifyOnNewPost: false
        +notifyOnNewPostReply: true
        +notifyOnNewPostCommentReply: true
        +addMentionsEntries: false
        +addMentionsPosts: true
        +isBanned: false
        +isVerified: false
        +isDeleted: false
        +isBot: false
        +spamProtection: true
        +customCss: null
        +ignoreMagazinesCustomCss: false
        +moderatorTokens: Doctrine\ORM\PersistentCollection {#1518 …}
        +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#1520 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#1632 …}
        +entries: Doctrine\ORM\PersistentCollection {#1631 …}
        +entryVotes: Doctrine\ORM\PersistentCollection {#1704 …}
        +entryComments: Doctrine\ORM\PersistentCollection {#1712 …}
        +entryCommentVotes: Doctrine\ORM\PersistentCollection {#1468 …}
        +posts: Doctrine\ORM\PersistentCollection {#1659 …}
        +postVotes: Doctrine\ORM\PersistentCollection {#1487 …}
        +postComments: Doctrine\ORM\PersistentCollection {#1767 …}
        +postCommentVotes: Doctrine\ORM\PersistentCollection {#1638 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#1492 …}
        +subscribedDomains: Doctrine\ORM\PersistentCollection {#1634 …}
        +follows: Doctrine\ORM\PersistentCollection {#1660 …}
        +followers: Doctrine\ORM\PersistentCollection {#1627 …}
        +blocks: Doctrine\ORM\PersistentCollection {#1419 …}
        +blockers: Doctrine\ORM\PersistentCollection {#1412 …}
        +blockedMagazines: Doctrine\ORM\PersistentCollection {#1453 …}
        +blockedDomains: Doctrine\ORM\PersistentCollection {#1432 …}
        +reports: Doctrine\ORM\PersistentCollection {#1425 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1435 …}
        +violations: Doctrine\ORM\PersistentCollection {#1699 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1703 …}
        +awards: Doctrine\ORM\PersistentCollection {#1430 …}
        +subscribedCategories: Doctrine\ORM\PersistentCollection {#1595 …}
        +categories: Doctrine\ORM\PersistentCollection {#1645 …}
        -id: 81695
        -password: "$2y$13$uv.H2o9.pNAWi2JY6kYXp.LtkmQOHvkqhJuq0rJqjWt471Wh3NNFC"
        -totpSecret: null
        -totpBackupCodes: []
        -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1678 …}
        +apId: "robin@beehaw.org"
        +apProfileId: "https://beehaw.org/u/robin"
        +apPublicUrl: "https://beehaw.org/u/robin"
        +apFollowersUrl: null
        +apInboxUrl: "https://beehaw.org/inbox"
        +apDomain: "beehaw.org"
        +apPreferredUsername: "robin"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: false
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1702223876 {#1515
          date: 2023-12-10 16:57:56.0 +01:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1702223875 {#1516
          date: 2023-12-10 16:57:55.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +magazine: App\Entity\Magazine {#265
        +icon: Proxies\__CG__\App\Entity\Image {#246 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#275
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#237 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#233 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#222 …}
        +entries: Doctrine\ORM\PersistentCollection {#180 …}
        +posts: Doctrine\ORM\PersistentCollection {#138 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#200 …}
        +bans: Doctrine\ORM\PersistentCollection {#117 …}
        +reports: Doctrine\ORM\PersistentCollection {#103 …}
        +badges: Doctrine\ORM\PersistentCollection {#81 …}
        +logs: Doctrine\ORM\PersistentCollection {#71 …}
        +awards: Doctrine\ORM\PersistentCollection {#1346 …}
        +categories: Doctrine\ORM\PersistentCollection {#1823 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#269
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#271
          date: 2023-11-02 13:51:08.0 +01:00
        }
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
      +slug: "Any-advice-on-running-a-pubnix-tilde"
      +title: "Any advice on running a pubnix/tilde?"
      +url: null
      +body: """
        I’m thinking about running my own pubnix/tilde. It would be invite-only and have a bunch of cool things:\n
        \n
        - git hosting with cgit or sourcehut\n
        - gemini hosting\n
        - web hosting\n
        - gopher hosting\n
        - FTP access\n
        - about 2GB of storage\n
        - matrix accounts + chat portal (Hydrogen seems cool)\n
        - internal message board/email?\n
        - maybe a CardDAV server?\n
        \n
        I think it would be a very cool opportunity to learn a bit about Linux and the internet. However, I literally have *no clue* how to set this up. I found this comment on Reddit:\n
        \n
        > It happens that you’re trying to build a tilde/pubnix? From my experience, tilde admins often give direct access to the system, but with proper permission elevation. Create a user group with limited permission (i.e. no sudo, disable specific software) and add their usernames to, give them a space in /home. Secondly, disable SSH passwords, ask them to send you their public keys, and only authenticate via public key. Finally, write a good/strict policy but also send a welcoming message. Also, you can look for further security practices, like changing default port, etc. but the key thing is proper user permission.\n
        \n
        That’s what I want. I was thinking about allowing password logins tho. I already have a VPS, which I want to reinstall to turn into this thing.\n
        \n
        I basically want to configure the services in a way, that they all depend on Unix accounts. That way I can create a Unix account with suitable permissions for every member, and stuff should Just Work™.\n
        \n
        So, I was thinking:\n
        \n
        - Exposing all git repos in `~/git/` at the URL `http(s)://git.example.com/~user/` (using cgit) and `gemini://git.example.com/~user/` (using git.gmi)\n
        - Exposing `~/pub/gem/` at `gemini://example.com/~user/`\n
        - Exposing `~/pub/web/` at `http(s)://example.com/~user/`\n
        - Exposing `~/pub/goph` at `gopher://example.com/~user/`\n
        - Creating `@user:example.com` matrix account with the same password as Unix. Changing the Unix password will also change the matrix password and changing the password from a matrix client should not be allowed.\n
        - Hosting Hydrogen (matrix client) at `https://chat.example.com`\n
        - Maybe host a CardDAV server with an account for every user, similar to what I want for matrix.\n
        \n
        Any pointers on how to set up something like this? How would I handle backups? (I know I can just backup all files in every member’s home directory, but how would I handle something more complicated, like the matrix accounts?). How would I make something like this secure?
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 1
      +favouriteCount: 0
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1697723274 {#2414
        date: 2023-10-19 15:47:54.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: [
        "@user"
      ]
      +comments: Doctrine\ORM\PersistentCollection {#1884 …}
      +votes: Doctrine\ORM\PersistentCollection {#1973 …}
      +reports: Doctrine\ORM\PersistentCollection {#1959 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
      +badges: Doctrine\ORM\PersistentCollection {#2440 …}
      +children: []
      -id: 18324
      -titleTs: "'advic':2 'pubnix/tilde':6 'run':4"
      -bodyTs: "'/example.com/~user':289 '/git':263 '/git.example.com/~user':269 '/home':139 '/pub/gem':279 '/pub/goph':291 '/pub/web':285 '/~user/':275,283,295 '2gb':37 'access':35,107 'account':41,234,242,300,342,393 'add':130 'admin':103 'allow':199,328 'alreadi':204 'also':164,169,312 'ask':144 'authent':154 'backup':367,373 'basic':219 'bit':66 'board/email':49 'build':96 'bunch':18 'carddav':52,338 'cgit':25,271 'chang':178,307,313,318 'chat':42 'chat.example.com':334 'client':324,332 'clue':77 'comment':86 'complic':389 'configur':222 'cool':20,46,61 'creat':116,239,296 'default':179 'depend':231 'direct':106 'directori':381 'disabl':126,141 'elev':115 'etc':181 'everi':247,344,377 'example.com':282,294,298 'example.com/~user/':281,293 'experi':101 'expos':258,278,284,290 'file':375 'final':158 'found':84 'ftp':34 'gemini':28 'git':22,260 'git.example.com':274 'git.example.com/~user/':273 'git.gmi':277 'give':105,134 'good/strict':161 'gopher':32 'group':119 'handl':366,386 'happen':90 'home':380 'host':23,29,31,33,329,336 'howev':72 'http':267,287 'hydrogen':44,330 'i.e':123 'intern':47 'internet':71 'invit':13 'invite-on':12 'key':151,157,184 'know':369 'learn':64 'like':177,361,390,399 'limit':121 'linux':68 'liter':74 'login':201 'look':172 'm':2 'make':397 'matrix':40,299,315,323,331,352,392 'mayb':50,335 'member':248,378 'messag':48,168 'often':104 'opportun':62 'password':143,200,304,310,316,320 'permiss':114,122,189,245 'pointer':354 'polici':162 'port':180 'portal':43 'practic':176 'proper':113,187 'public':150,156 'pubnix/tilde':8 're':93 'reddit':88 'reinstal':212 'repo':261 'run':5 'second':140 'secur':175,401 'seem':45 'send':147,165 'server':53,339 'servic':224 'set':80,358 'similar':346 'softwar':128 'someth':360,387,398 'sourcehut':27 'space':137 'specif':127 'ssh':142 'storag':39 'stuff':250 'sudo':125 'suitabl':244 'system':110 'thing':21,185,217 'think':3,55,197,257 'tho':202 'tild':102 'tilde/pubnix':98 'tri':94 'turn':214 'unix':233,241,306,309 'url':266 'use':270,276 'user':118,188,297,345 'usernam':132 'via':155 'vps':207 'want':194,210,220,350 'way':227,236 'web':30 'welcom':167 'work':253 'would':10,57,364,384,395 'write':159"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1697628085
      +visibility: "visible             "
      +apId: "https://beehaw.org/post/8820647"
      +editedAt: null
      +createdAt: DateTimeImmutable @1697621585 {#1793
        date: 2023-10-18 11:33:05.0 +02:00
      }
    }
    +magazine: App\Entity\Magazine {#265}
    +image: null
    +parent: null
    +root: null
    +body: "XMPP is a must. I automatically discard tildes that host matrix but not XMPP."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1697723274 {#4188
      date: 2023-10-19 15:47:54.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@user"
      "@robin@beehaw.org"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4177 …}
    +nested: Doctrine\ORM\PersistentCollection {#4175 …}
    +votes: Doctrine\ORM\PersistentCollection {#4173 …}
    +reports: Doctrine\ORM\PersistentCollection {#4171 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4139 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4143 …}
    -id: 216626
    -bodyTs: "'automat':6 'discard':7 'host':10 'matrix':11 'must':4 'tild':8 'xmpp':1,14"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.wtf/comment/2597483"
    +editedAt: null
    +createdAt: DateTimeImmutable @1697723274 {#4124
      date: 2023-10-19 15:47:54.0 +02:00
    }
  }
  +showMagazineName: false
  +showEntryTitle: false
  +showNested: true
  +level: 1
  +canSeeTrash: false
  +dateAsUrl: false
  -requestStack: Symfony\Component\HttpFoundation\RequestStack {#1328 …}
  -authorizationChecker: Symfony\Component\Security\Core\Authorization\AuthorizationChecker {#931 …}
}